Social EngineeringRetail & ConsumerRetailPhishingStolen CredentialsMulti-Stage ChainCustomer Data InvolvedEmployee Data InvolvedPIICredentialsLowActive

COTY INC.

bd_402f77eeeadffcd4 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jan 18, 2018

Filed

Jul 6, 2018

To disclose

24 weeks

Affected · nationwide

10015 in this filing

Linked

4 filings

Confidence

66%

Full breach record for COTY INC. →

Coty, Inc. reported a phishing incident affecting approximately 100 employee email accounts between Jan 12 and Feb 8, 2018. Detected on Jan 18, 2018, the breach exposed unstructured personal data in emails. 15 NH residents affected. Notices sent July 6, 2018. Response included password resets, forensics, and system upgrades.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 6 days

discovery → filing · 24 weeks / 169 days

Jan 12, 2018

Begins

Jan 18, 2018

Discovered

Jul 6, 2018

Filed

vs. sector median

+17 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Montana State AGbd_42a674d07db4cdb12018-07-06Candidate
California State AGbd_ffa8a6399c145ac22018-07-06Verified
Massachusetts State AGbd_22fd4338a93c39662018-07-09 · +3dVerified

Name: COTY INC.
norm: coty
Domain: coty.com

Name: COTY INC.
norm: coty
Domain: coty.com
Industry: Retail & Consumerllm

Discovered: Jan 18, 2018
Breach occurred: Jan 12, 2018 – Feb 8, 2018
Undetected for: 6 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 6, 2018
Affected individuals: 100state + nationwide
Data types: PIICredentials
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Initial access: phishing_link

During the incident: Resetting global passwords
Email filtering rule enhancement
Modifying access policies
Upgrading its applications globally
Conducting forensics with external security partners
Re-imaging machines with suspected malware
Internally communicating with Coty employees and leadership to reemphasize the need for vigilance against such attacks
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 24 weeks(169 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Montana State AGJul 6 · first

California State AGJul 6 · first

New Hampshire State AGJul 6 · first · this page

Massachusetts State AG+3d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/coty-20180706.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 6, 2018
Raw hash: 717763adec3b7affd3de1755cd215b507ac53aa6267f10153e380e7a40442f76

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityCOTY INC.

Victim entityCOTY INC.

Incidentdiscovered Jan 18, 2018

Stated responseResetting global passwords

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov